This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf rpki-repo.registro.br/repo/nicbr_repo/1/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer
File:                     EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.cer (raw, json)
Hash identifier:          UkvHhVVVGHBfWDpAMf1vUKqhZUGZgomxt+Bd9Dogfgg=
Subject key identifier:   EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
Authority key identifier: 60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B
Certificate issuer:       /CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
Certificate serial:       55071E8083F3093A548F2DEAC8BB75E044DC1366
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
Manifest:                 rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
caRepository:             rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
Notify URL:               https://rpki-repo.registro.br/rrdp/notification.xml
Certificate not before:   Tue 30 Dec 2025 00:07:24 +0000
Certificate not after:    Tue 29 Dec 2026 00:12:24 +0000
Subordinate resources:    AS: 53123
                          IP: 187.111.192.0/20
                          IP: 2804:6478::/32
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 26 Jan 2026 14:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:07:1e:80:83:f3:09:3a:54:8f:2d:ea:c8:bb:75:e0:44:dc:13:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=605432E9E1B05A7E6C208B2946FDC9C967CA8A4B
        Validity
            Not Before: Dec 30 00:07:24 2025 GMT
            Not After : Dec 29 00:12:24 2026 GMT
        Subject: CN=EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:7d:1e:f7:12:a5:b8:d8:40:e3:41:c9:4c:
                    e9:1a:05:ee:35:d7:52:46:17:1d:ad:6c:d7:e2:44:
                    24:3d:09:7b:01:18:95:3e:45:53:f8:00:33:12:49:
                    3b:85:9c:ba:71:2f:03:85:ac:66:8f:8a:13:6e:ef:
                    3f:72:c1:74:fc:8e:ea:4f:5a:ea:8b:08:a1:4f:9b:
                    18:e0:31:1d:69:e6:5b:24:4f:0a:0a:0c:ac:84:27:
                    4d:26:bd:09:2e:96:e8:c9:25:7d:0f:7d:8e:d7:2d:
                    4e:f6:00:4d:c9:37:e6:b4:da:89:6b:0f:eb:b8:64:
                    64:cb:83:48:ff:d4:92:a1:7a:7f:ee:11:ee:66:97:
                    80:76:5f:a0:f4:00:32:2e:4d:ec:c3:5b:66:70:36:
                    da:1b:b7:c4:77:b2:d4:96:0e:f6:3b:4a:c7:62:21:
                    33:30:d6:63:49:9f:36:a3:b3:55:07:0f:99:ba:42:
                    74:53:b5:66:6a:2f:4d:60:4e:f9:4c:57:81:77:5d:
                    7e:c6:aa:5d:c1:f3:4b:66:ea:b6:47:2e:f7:33:86:
                    c9:07:e3:be:68:e9:99:97:1f:d8:3a:34:8e:37:84:
                    50:c4:72:24:d1:6c:92:f7:b6:9c:07:8d:0e:1b:0f:
                    cf:4b:8a:b1:6a:5b:f1:57:71:3d:3e:57:8b:d3:8e:
                    a8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                EB:C5:8A:E8:BA:FE:DA:0B:B7:1F:C4:E6:45:19:F7:56:E1:FE:71:93
            X509v3 Authority Key Identifier:
                keyid:60:54:32:E9:E1:B0:5A:7E:6C:20:8B:29:46:FD:C9:C9:67:CA:8A:4B

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/
                RPKI Manifest - URI:rsync://rpki-repo.registro.br/repo/GUaB2Xr7nXPRrHYEFu5wwBVnX2twC8kdXT86huUfdUgx/0/EBC58AE8BAFEDA0BB71FC4E64519F756E1FE7193.mft
                RPKI Notify - URI:https://rpki-repo.registro.br/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.111.192.0/20
                IPv6:
                  2804:6478::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53123

    Signature Algorithm: sha256WithRSAEncryption
         89:bc:5f:d2:6b:37:5f:38:ba:42:a3:b6:ad:85:1e:61:a7:49:
         bb:dc:33:12:4f:00:ae:ae:a2:d2:0a:ef:eb:f8:1d:a3:c2:6b:
         43:3d:99:9a:8a:8a:27:f8:bf:e5:13:e0:08:7f:31:07:83:0f:
         6f:6f:7f:94:a3:25:56:19:28:9e:a4:8e:1a:58:21:03:0b:c8:
         60:6d:e0:dd:19:5f:97:55:61:7b:6c:e8:01:9f:c2:b1:35:68:
         52:1a:00:6f:b4:4e:aa:b6:9e:1b:6e:55:ae:ca:79:4e:d6:66:
         76:74:c3:ff:d2:7c:b0:25:0a:70:a6:87:28:71:12:29:8f:bf:
         ff:0a:88:50:c8:05:2a:7f:99:db:f7:ca:5c:30:36:c2:de:7a:
         69:e5:2f:27:7c:cf:e0:e6:64:52:32:f4:98:df:bf:36:8c:91:
         4f:00:af:62:a0:d1:36:98:76:c0:58:63:40:6d:d4:77:6e:b4:
         c6:2c:69:a5:3a:88:7b:31:80:4f:0b:55:73:28:b3:a2:a7:2d:
         eb:a3:48:a0:53:1d:1a:fa:93:4e:1a:c8:14:af:1b:f8:78:d2:
         db:12:a0:50:ec:14:22:0b:ae:b0:1f:6d:18:65:29:ba:a0:2d:
         ce:a7:60:50:5a:73:c2:22:10:9b:73:97:64:24:42:85:b5:be:
         7b:19:4f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----